This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DjiJ2zqpwT4ujqUNMpJ0-imhgl8.roa File: DjiJ2zqpwT4ujqUNMpJ0-imhgl8.roa (raw, json) Hash identifier: ob/H5+Y6q3Vlw9QnvhD5JcVYdJxva80o0kaEDf0dUuY= Subject key identifier: 0E:38:89:DB:3A:A9:C1:3E:2E:8E:A5:0D:32:92:74:FA:29:A1:82:5F Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB709DD7B7ED791F3E31DC1289769E Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DjiJ2zqpwT4ujqUNMpJ0-imhgl8.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59711 IP address blocks: 213.232.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:70:9d:d7:b7:ed:79:1f:3e:31:dc:12:89:76:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e3889db3aa9c13e2e8ea50d329274fa29a1825f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:73:5d:29:cf:dc:9b:4f:ab:eb:38:5d:6d: 90:29:84:4a:d8:dd:fa:66:8a:cc:4e:46:cd:f3:54: 9a:40:37:22:92:55:6b:0a:15:8f:dc:91:c1:d6:35: 30:4d:48:82:f0:a0:c7:de:17:1a:f2:f4:e6:47:83: c7:48:1f:75:2b:81:dc:38:f2:39:4d:1a:d5:ad:3b: 82:b3:de:88:97:1a:54:19:74:ff:c5:a5:37:88:8e: 25:4b:0e:a3:1a:28:9e:a8:96:cc:7d:af:9f:7e:c9: 80:5f:81:03:e1:b6:10:de:7f:ae:61:a5:f9:b3:56: ec:85:a4:ac:4c:9a:69:ce:d4:15:00:b9:8b:a1:a6: 43:a6:02:e1:22:0a:d6:c7:8b:e8:88:db:15:5d:bc: d3:4e:8d:1b:81:60:df:2b:b0:18:89:86:51:6c:3f: 8b:3e:25:74:10:b3:c4:a6:90:b7:38:1e:5d:5e:32: 82:f2:db:0c:5c:19:53:25:b3:8e:82:e2:5c:9c:07: 9b:70:bb:f6:6a:4d:6a:dd:07:7a:bd:7d:76:4b:e1: a8:73:ce:ca:79:bc:6f:21:6b:00:e1:4d:6b:6b:b7: 2c:2f:d0:c4:a9:15:af:5c:87:51:4e:09:99:cc:4b: 7e:d4:c0:60:6f:1b:df:1e:90:58:42:c9:2c:de:cb: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:38:89:DB:3A:A9:C1:3E:2E:8E:A5:0D:32:92:74:FA:29:A1:82:5F X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DjiJ2zqpwT4ujqUNMpJ0-imhgl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.116.0/22 Signature Algorithm: sha256WithRSAEncryption 63:bb:f5:47:a7:2c:26:00:91:4a:e8:ba:9b:9c:b2:bd:07:f4: 16:f9:b0:4f:3b:41:dd:df:11:fd:5b:da:d8:ad:62:5b:71:77: 0c:48:20:24:9c:4d:3f:77:c5:69:a1:f3:6b:5c:7a:61:4e:21: 9c:85:a7:49:b8:c2:58:12:bc:b2:f6:e2:25:15:ab:de:fc:eb: e5:56:92:21:db:d1:6d:bf:f7:dc:87:a0:d8:e0:ca:ed:a8:00: d7:7b:f5:25:00:16:3a:cd:85:ef:0d:96:76:5f:e3:38:2a:ff: 09:0d:35:38:c9:44:c0:a6:33:d9:99:7e:27:08:88:78:33:f7: 74:14:0a:72:5c:02:34:20:01:24:b5:8e:f9:53:ca:0f:53:c9: 1c:03:e9:1b:f7:b9:ae:69:e8:f8:57:fb:34:4e:61:15:fd:01: 2b:d2:99:32:6c:7c:49:9e:2a:52:0d:30:1e:5a:40:03:d3:ef: e4:37:ab:f6:42:85:4f:86:b6:40:dd:f0:ad:fe:6d:1b:86:02: 66:98:f7:12:a0:91:76:92:2f:be:10:50:8d:9d:1f:26:9b:73: 7a:8f:39:e8:a4:9c:93:9a:98:89:cf:d2:bd:b6:b8:9a:ae:96: e2:ed:9e:1e:02:cd:af:9e:44:c2:89:94:de:31:03:af:d7:a7: 93:74:10:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3Cd17fteR8+MdwSiXaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTM4ODlkYjNhYTljMTNlMmU4ZWE1MGQzMjkyNzRmYTI5YTE4MjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTdzXSnP3JtPq+s4XW2QKYRK2N36 ZorMTkbN81SaQDciklVrChWP3JHB1jUwTUiC8KDH3hca8vTmR4PHSB91K4HcOPI5 TRrVrTuCs96IlxpUGXT/xaU3iI4lSw6jGiieqJbMfa+ffsmAX4ED4bYQ3n+uYaX5 s1bshaSsTJppztQVALmLoaZDpgLhIgrWx4voiNsVXbzTTo0bgWDfK7AYiYZRbD+L PiV0ELPEppC3OB5dXjKC8tsMXBlTJbOOguJcnAebcLv2ak1q3Qd6vX12S+Goc87K ebxvIWsA4U1ra7csL9DEqRWvXIdRTgmZzEt+1MBgbxvfHpBYQsks3svKnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA44ids6qcE+Lo6lDTKSdPopoYJfMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvRGppSjJ6cXB3VDR1anFVTk1wSjAtaW1oZ2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1eh0MA0G CSqGSIb3DQEBCwUAA4IBAQBju/VHpywmAJFK6LqbnLK9B/QW+bBPO0Hd3xH9W9rY rWJbcXcMSCAknE0/d8VpofNrXHphTiGchadJuMJYEryy9uIlFave/OvlVpIh29Ft v/fch6DY4MrtqADXe/UlABY6zYXvDZZ2X+M4Kv8JDTU4yUTApjPZmX4nCIh4M/d0 FApyXAI0IAEktY75U8oPU8kcA+kb97muaej4V/s0TmEV/QEr0pkybHxJnipSDTAe WkAD0+/kN6v2QoVPhrZA3fCt/m0bhgJmmPcSoJF2ki++EFCNnR8mm3N6jznopJyT mpiJz9K9triarpbi7Z4eAs2vnkTCiZTeMQOv16eTdBAj -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:32 2026 by rpki-client